SBC 7000 - Installing SecureLink for Remote Access

Overview

Use these instructions to configure the SBCs with basic network interface information, and to configure SecureLink application to allow Ribbon personnel to remotely set up your SBC platform.

SecureLink is a third-party remote access management tool used extensively by the Ribbon Support team to allow dedicated remote connectivity into Ribbon equipment while providing customers with the latest in security and audit capabilities. SecureLink creates an outbound connection to Ribbon, and only allows inbound traffic from Ribbon. For example, only Ribbon personnel can use this connection.

Prerequisites

• The SBC server is racked, cabled, and powered up.

• Server names are known (i.e. “XYZSBC1a” and “XYZSBC1b” as an HA pair).

• The BMC, management, and DNS IPs are known (use table below).

• DNS registration code is known (use table below).

• Router is configured and connected to SBC mgmt. ports.

• Router can send traffic to public Internet.

• User obtained from Ribbon the unique registration code for each SBC unit.

• User provided server names, Management IPs, and NTP IP to Ribbon.

The following table depicts the information needed to install SecureLink, and is divided into three sections. You will use this information in the subsequent sections below.

1. BMC Network
2. Network Management Interfaces
3. DNS Configuration

Procedure

Refer to the three configuration details described above and perform the following steps to install the SecureLink for remote access:

1. Configure BMC For Remote Access

The SBC servers ship pre-configured with IP address 169.254.77.1 to facilitate out of the box access to the BMC web interface. You must configure your PC/laptop IP address to be on this network so that it can communicate with the SBC 7000 server.

1. Connect  your PC/Laptop via an Ethernet cable to the Field Service Port (FSP) at the back of SBC unit as shown in one of the figures below, and power up the SBC (if not already on).

   Connecting PC to Ethernet Port (SBC 7000 series)

   
2. Verify that both link LEDs at the FSP are lit. If only the left LED is lit, your PC/laptop network adapter link speed may be set to 10 Mbps. Check the PC/laptop Device Manager, and if necessary set your PC/laptop link speed to 100 Mbps/Full Duplex.
3. If your PC/laptop uses DHCP and Automatic Private IP Address setting is enabled (default setting), the PC/laptop will be assigned an IP address in the same subnet as the initial BMC IP; therefore proceed to step 5.  If your PC/laptop does not use DHCP, proceed to the next step to configure a static IP.

4. Set your PC/Laptop IP address to 169.254.77.2, subnet mask to 255.255.255.0, and default gateway to 169.254.77.1.

   To access the Internet Protocol Version 4 (TCP/IPv4) Properties, you need to12: Click Start, then Control Panel. Click System and Security. Click Network and Internet. Click View network status and tasks under Network and Sharing Center. Click Change adapter settings. Right-click on your Network Interface Card (NIC), then click Properties. Click Internet Protocol Version 4 (TCP/IPv4), then click Properties. Alternatively, you can access the Internet Protocol Version 4 (TCP/IPv4) "Properties" by clicking the Properties button on the Local Area Connection Status window

5. Type the pre-configured IP address 169.254.77.1 in a web browser (Firefox recommended. If using Internet Explorer, you must  manually add "https://169.254.77.1" as a trusted site) to connect to the BMC web interface.

   Note

   If you receive a security certificate warning, ignore the warning and continue to the website. 

6. Log on to SBC BMC GUI. The SBC BMC main screen is displayed.

7. Navigate to Configure > Network.
   

   
   
   The Network Settings screen is displayed.

8. 
   

   Enter the BMC IP Address, Subnet Mask and Default Gateway network settings, and click Save.

   
   
   

9. Disconnect the laptop from FSP, and then connect the FSP Port to the router.

10. Connect a PC to the IP network that can access the BMC IP address.

11. Continue to section B to configure network management interfaces.

2. Configure Network Management Interfaces

Configure primary and secondary management IP interfaces.

1. Open a browser and enter the new BMC IP address to connect to the BMC web interface.

2. Log on to the SBC BMC GUI.
   
   
   

   The SBC BMC main screen is displayed.
   
   
   
   

3. Navigate to Configuration > Platform Management Network. The Platform Management Network Settings screen is displayed.
   
   
   
   
4. Configure the following network settings for both Management Interfaces 0 and 1, and then click Save:
   
   • IPv4 Address
   • IPv4 Address Prefix

   • IPv4 Default Gateway

5. Continue to section 3 to configure SecureLink.

3. Configure SecureLink From EMA

1. Check that port 22 is set to allow access to securelink.sonusnet.com.
2. From same network as management IPs, open a browser and enter new mgmt. IP.
3. Log on to the SBC EMA Platform Mode. Upon initial login, you are prompted to change password. Change the password accordingly.

4. Navigate to Administration > System Administration and select Secure Link from the navigation panel.
   
   
   

5. From the SecureLink window, enter DNS IP Address associated with your network and the assigned Registration Code (obtained from Ribbon).

6. Click Enable Gatekeeper Access.

7. Wait a minute or two for Gatekeeper access field to change to "enabled" before proceeding.
   
   
   

8. Click Test SecureLink Access to perform Host name lookup and Direct connectivity tests.

9. Observe "Passed" indication for both tests. The SBC is now configured for SecureLink remote access!
   

10. If you have an HA configuration, return to section 1. Configure BMC For Remote Access and repeat all steps in this procedure for the second SBC 7000. Then continue to the next step. (Be sure to use Unit B’s information).

Contact your Ribbon representative to test remote connectivity to SBC 7000 platform via SecureLink.